home

utorrent_3-4-5-build-41372.exe

µTorrent

BitTorrent Inc.

This is a setup program which is used to install the application. The file has been seen being downloaded from utorrent.ro.softonic.com.
Publisher:
BitTorrent Inc.

Product:
µTorrent

Version:
3.4.5.41372

MD5:
715b3e35d6cfdbcfd4155d3511e973e5

SHA-1:
fdc7fd9ad1f8fdd64ef494149ecb88366c1dfb94

SHA-256:
b04e3f608d11803a54b090ad467f3ecddfa9bc083ef8ce38330d162c64ae4e88

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/26/2024 11:44:13 PM UTC  (a few moments ago)

File size:
2 MB (2,097,176 bytes)

Product version:
3.4.5.41372

Copyright:
©2015 BitTorrent, Inc. All Rights Reserved.

Original file name:
uTorrent.exe

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\users\{user}\downloads\utorrent_3-4-5-build-41372.exe

File PE Metadata
Compilation timestamp:
11/17/2015 10:25:20 PM

OS version:
5.1

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
12.0

CTPH (ssdeep):
49152:PHMtBuTT9adbWZW+O9JDT8XCho48ZQh+9wg4PTz3XyV:PHnwdbj3yShoSheB4/X+

Entry address:
0x4A6C10

Entry point:
60, 18, D4, B4, 21, FF, C7, 56, 56, 3D, 90, 8E, 00, 00, 76, 0D, B8, B1, 70, 02, 70, 0F, B6, F3, 1D, 50, 06, 1C, 05, 85, DB, 8D, 05, 7D, EC, C4, 06, 85, EB, 87, D2, 43, 81, C1, FF, CD, 00, 00, 31, D3, C6, C4, B4, 8D, 05, 1F, B1, 90, 6D, 3B, C5, 75, 0E, 84, C0, 8D, 1D, E7, 36, 45, A6, 8D, 0D, A3, 90, 88, 2B, EB, 0D, B9, 9C, 58, EB, F2, 69, C3, E1, FF, CF, CC, 22, F8, F7, C1, 6F, D5, 5C, 0F, 3C, B4, 88, E9, 68, 6A, EC, 39, 00, 68, FF, 57, 4B, 00, 88, E2, 85, EA, E8, 00, 00, 00, 00, 5F, 28, DD, 69, D5, 73, 6E...
 
[+]

Entropy:
7.9853  (probably packed)

Code size:
1.8 MB (1,896,448 bytes)

The file utorrent_3-4-5-build-41372.exe has been seen being distributed by the following URL.

http://utorrent.ro.softonic.com/start-download/.../0efc07bcccc378ce881518d0d93278e6

Scan utorrent_3-4-5-build-41372.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.